﻿<!--#INCLUDE FILE="config.asp"-->
<%
if(Session("AdminAccessLevel") <> 1 and Session("AdminAccessLevel") <> 3) then
	Response.Redirect("admin-login.asp?msg=invalid")
end if

title_re = request("title")
note = request("note")
guestid = request("guestid")

		set objConnect = server.createObject("ADODB.Connection")       
		objConnect.open conStr

		Set oCmd = Server.CreateObject("ADODB.Command")

		oCmd.ActiveConnection = objConnect
		oCmd.CommandText = "sp_add_new_Notes" 
		oCmd.CommandType = 4

		Set title = oCmd.CreateParameter("@title", 200,1,100, title_re)
		oCmd.Parameters.Append title
		
		Set note = oCmd.CreateParameter("@note", 200,1,100, note)
		oCmd.Parameters.Append note
		
		Set guestid = oCmd.CreateParameter("@guestid", 3,1,100, guestid)
		oCmd.Parameters.Append guestid
		
		Set userid = oCmd.CreateParameter("@userid", 3,1,100,session("AdminId"))
		oCmd.Parameters.Append userid

		set rss = oCmd.execute
%>